Hacking Humans
Recent Episodes
My relationship status is “compromised.”
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. Joe once again shares tales from his "stupid" chickens. Dave has the story on how sugar baby scams are evolving into broader cyber threats involving fake identities, financial fraud, and account compromise. Maria's got the story on a Michigan business owner whose hacked Facebook account was drained, banned, and effectively locked away by automated moderation systems. Joe has the story on a Virginia family who narrowly avoided a Facebook Marketplace rental scam after a fake landlord asked them to wire money for a home they didn’t own. Our catch of the day comes from Reddit, where a scammer was this close too fooling, not really.
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow, a sweeping DOJ-led crackdown and rare U.S.-China cooperation that led to hundreds of arrests and the dismantling of global scam centers targeting Americans. Maria has the story on a study finding over a third of FIFA World Cup 2026 partner domains lack strong DMARC “reject” protections, leaving fans and customers vulnerable to spoofed emails and event-themed fraud. Dave’s got the story on Americans losing $2.1 billion to social media scams in 2025, with shopping, investment, and romance fraud surging as criminals increasingly use platforms like Facebook, WhatsApp, and Instagram to target victims. Joe’s got the story on AI deepfakes fueling scams, from fake Taylor Swift videos on TikTok luring users into phishing schemes to a completely fabricated influencer persona run by a scammer, underscoring how convincingly synthetic identities are being used to deceive online. Our catch of the day is on a text message where a scammer is promising a big reward.
This week, while Maria is on vacation, Dave Bittner and Joe Carrigan are joined by Michele Kellerman as they discuss the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. We start with some follow up: a quick shoutout to Blood Cancer United and then we get into a listener “Chicken Chat” from Sue about handling an aggressive rooster. Joe’s got the story of how former Luther Davis allegedly teamed up with a partner to impersonate NFL players using fake companies, documents, and disguises to secure nearly $20 million in fraudulent loans—charges they are now expected to plead guilty to. Michele’s story is on how scammers are targeting families of recently arrested individuals by posing as officials who promise quick releases in exchange for hard-to-trace payments, prompting warnings from law enforcement—including changes like taking jail rosters offline—to cut off these schemes. Joe’s got the story on how Amazon is leaning heavily on AI, continuous monitoring, and global enforcement partnerships to proactively block fraud, counterfeit goods, and scams—often before customers or brands ever spot them. For our Catch of the Day, we have a string of texts from Reddit where a user could have possibly been talking to Sir Paul McCartney, possibly.
This week, while Maria is on vacation, Dave Bittner and Joe Carrigan are joined by Michele Kellerman as they discuss the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. Dave brings us a lively follow-up from his recent theater outing the conversation circles back to chicken talk. Michele also highlights the work of Blood Cancer United sharing insight into their mission and impact. Dave’s story is on the SLAM method, a simple phishing-defense framework that teaches users to evaluate suspicious emails by checking the sender, links, attachments, and message for common signs of deception and social engineering. Michele’s got the story on a potential turning point in online scams, where rising pressure—from revelations that Meta Platforms has profited from fraudulent ads, to banks and regulators like Jerome Powell and Scott Bessent warning about systemic risks—suggests liability may soon expand beyond banks to include social media, telecoms, and other upstream players. Joe’s story is on two cousins, Shray Goel and Shaunik Raheja, who pleaded guilty in a nationwide $8.5 million scheme using fake listings, double bookings, and last-minute cancellations across platforms like Airbnb and Vrbo to maximize profits while deceiving thousands of travelers. On our catch of the day, A Reddit user shares a message they got from a scammer posing as their child.
This week, hosts of N2K CyberWire Maria Varmazis and Dave Bittner alongside Joe Carrigan are discussing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines. If you thought you could escape chicken talk, you we're wrong, this week Joe shares some more updates on his chickens. Joe’s got two stories this week, one on a New Jersey man arrested while attempting to collect $800,000 in gold as part of a widespread scam targeting elderly victims, and the second is on a new Google-tracked threat group using social engineering and phishing tactics to infiltrate BPOs and steal corporate data for extortion. Maria’s story is on a conversation she had with Sean Colicchio, highlighting how trusting human instincts, slowing down, and balancing security training can help individuals and organizations better defend against social engineering attacks. Dave’s got the story on a surge in traffic violation scams now using QR codes in phishing texts to trick victims, alongside ten hard-stop rules emphasizing verification, avoiding links or inbound requests, and slowing down to prevent falling for increasingly sophisticated scams. Our Catch of the Day comes from Reddit, where a user questioned a supposed “Google Play Console partnership” email, and the community quickly flagged it as a likely scam—citing red flags.
